WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
subscribe2
Published
2022-12-22
Title
Subscribe2 < 10.38 - User Deletion via CSRF
Slug
subscribe2
Published
2023-06-26
Title
Subscribe2 – Form, Email Subscribers & Newsletters < 10.41 - Missing Access Controls
Slug
subscribe2
Published
2023-06-26
Title
Subscribe2 – Form, Email Subscribers & Newsletters < 10.41 - Sending Emails via CSRF
Slug
subscribe2
Published
2025-02-18
Title
Subscribe2 – Form, Email Subscribers & Newsletters < 10.44 - Unauthenticated Stored Cross-Site Scripting via IP Parameter
Slug
subscribe2
Published
2026-02-03
Title
Subscribe2 < 10.45 - Missing Authorization
Slug
subscribe2
Published
2026-08-03
Title
Subscribe2 < 10.46 - Reflected XSS via email Parameter
Slug
subscribe2
Published
2026-08-17
Title
Subscribe2 – Form, Email Subscribers & Newsletters < 10.48 - Unauthenticated Stored Cross-Site Scripting
Slug
subscriber
Published
2017-04-12
Title
Multiple BestWebSoft Plugins - Authenticated Cross-Site Scripting (XSS)
Slug
subscribers-com
Published
2023-04-19
Title
Subscribers - Free Web Push Notifications < 1.5.4 - Admin+ Stored XSS
Slug
subscribers-text-counter
Published
2023-08-04
Title
Subscribers Text Counter < 1.7.1 - Settings Update via CSRF to Stored XSS
Slug
subscription
Published
2026-03-05
Title
Subscription for WooCommerce – WordPress Recurring Payments Plugin < 1.8.11 - Authenticated (Customer+) Insecure Direct Object Reference
Slug
subscription
Published
2026-05-25
Title
Subscription & Recurring Payment for WooCommerce < 1.9.2 - Cross-Site Request Forgery
Slug
subscriptiondna
Published
2025-01-24
Title
Subscription DNA < 2.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
subscriptions-for-woocommerce
Published
2026-03-13
Title
Subscriptions for WooCommerce < 1.9.0 - Missing Authorization
Slug
subscriptions-for-woocommerce
Published
2026-03-17
Title
Subscriptions for WooCommerce < 1.9.3 - Missing Authorization to Unauthenticated Arbitrary Subscription Cancellation
Slug
subscriptions-for-woocommerce
Published
2026-06-25
Title
Subscriptions for WooCommerce < 1.9.6 - Missing Authorization
Slug
subscriptions-for-woocommerce
Published
2026-07-29
Title
Subscriptions for WooCommerce < 2.0.1 - Missing Authorization to Authenticated (Shop Manager+) Arbitrary Plugin Installation via wps_sfw_install_plugin_configuration AJAX Action
Slug
subscriptions-for-woocommerce
Published
2026-07-31
Title
Subscriptions for WooCommerce < 2.0.1 - Authenticated (Contributor+) Privilege Escalation via '_wps_plan_user_role' Membership Plan Meta
Slug
subscriptions-for-woocommerce
Published
2026-08-03
Title
Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation
Slug
subscriptions-for-woocommerce
Published
2026-08-03
Title
Subscriptions for WooCommerce < 2.0.1 - Subscriber+ Subscription Detail Disclosure via IDOR
Slug
subscriptions-for-woocommerce
Published
2026-08-03
Title
Subscriptions for WooCommerce < 2.0.1 - Payment Bypass via Attacker-Supplied PayPal Capture Token
Slug
subscriptions-for-woocommerce
Published
2026-09-14
Title
Subscriptions for WooCommerce < 2.0.3 - Unauthenticated Subscription Data Disclosure via REST API Secret Key Bypass
Slug
subscriptions-for-woocommerce
Published
2026-09-14
Title
Subscriptions for WooCommerce < 2.0.3 - Subscription Cancellation via CSRF
Slug
subscriptions-memberships-for-paypal
Published
2021-10-11
Title
Multiple Plugins from WPPlugin - Reflected Cross-Site Scripting via page Parameter
Slug
subscriptions-memberships-for-paypal
Published
2025-02-25
Title
Subscriptions & Memberships for PayPal < 1.1.7 - Cross-Site Request Forgery to Arbitrary Post Deletion